
$ rpki-client -vvf rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
File: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft (raw, json)
Hash identifier: oebso1BLudhgCmOtxDO2Mvo/HXSmI3K3MQ6pR+xZi4c=
Subject key identifier: 91:2C:E2:B5:8A:01:AA:2F:C6:69:C3:F5:F9:69:1F:6F:C5:4B:6A:4D
Authority key identifier: A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
Certificate issuer: /CN=A9186B80/serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Certificate serial: 05E5
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
Manifest number: 05D4
Signing time: Wed 22 Jul 2026 23:48:25 +0000
Manifest this update: Wed 22 Jul 2026 23:48:24 +0000
Manifest next update: Wed 29 Jul 2026 23:48:24 +0000
Files and hashes: 1: qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl (hash: Fi0esJbdYnpSBJKvOn8iS5ZljNBthgfbXWfuw2ow/9E=)
2: D3A7743C19EA11EC9C11D95AC4F9AE02.roa (hash: u3QeAH/Xjc/phjAuXipIPbI5+ZQ8m+RjZgJwXpuM0m0=)
3: 9C09360E0C3411EDB8619843C4F9AE02.roa (hash: wMvkSHLjnq5sLqQ/zAmxIdC9rNEgP/i+2/CsALVDz+A=)
4: 2DA2253A4E1211F1BF860394CD833773.roa (hash: OQC3+KRN4hsjI0V7STttKspjEkoDxGfQu0IpJxAelaI=)
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Wed 29 Jul 2026 23:48:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1509 (0x5e5)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A9186B80, serialNumber=A8FC259A101EAB826EE8CBEA2A0BDA5CDECFDAF2
Validity
Not Before: Jul 22 23:48:24 2026 GMT
Not After : Jul 29 23:48:24 2026 GMT
Subject: CN=6a6156c8-33eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:4b:9e:77:ed:9e:d6:d3:3a:ea:20:a0:d9:a9:
a3:29:04:ea:ea:80:50:ed:db:58:8d:10:a6:58:5f:
ca:c2:5c:38:22:ee:ea:28:93:7a:31:bc:34:4d:bd:
25:80:f4:60:c1:2e:c8:f6:fb:56:12:d6:80:e7:42:
4f:bd:9b:e4:67:7f:12:38:a6:2e:6e:4c:e9:21:06:
05:d7:47:49:34:5b:9d:dd:98:a6:e4:d0:22:06:71:
3d:c5:38:b5:b3:09:e6:7a:01:7e:66:ee:82:ca:12:
15:a2:5d:e6:d2:60:39:ab:c8:e8:c4:cc:b5:0f:a0:
d8:f8:7a:95:71:e1:1c:f3:8e:fe:2b:81:3b:99:42:
85:ae:41:10:a4:43:a6:ad:71:eb:67:e7:26:8d:b0:
a9:84:e8:d9:e0:b6:6c:dd:09:0b:81:8f:6a:7b:f0:
e1:f3:22:c7:26:ea:71:d8:d3:a8:e0:3a:9c:fc:7e:
c8:ec:b6:0d:36:40:1d:7c:7c:fc:74:8e:bb:f3:52:
02:05:1f:eb:3d:4b:c9:61:2b:97:29:c2:89:db:01:
9a:9f:79:90:72:20:6d:02:3f:77:30:f6:ff:ab:06:
38:e4:d7:2a:99:5c:fb:90:cb:0a:ad:a0:e5:0a:bc:
34:44:aa:c0:56:15:f3:40:16:05:ad:b8:07:90:14:
87:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:2C:E2:B5:8A:01:AA:2F:C6:69:C3:F5:F9:69:1F:6F:C5:4B:6A:4D
X509v3 Authority Key Identifier:
keyid:A8:FC:25:9A:10:1E:AB:82:6E:E8:CB:EA:2A:0B:DA:5C:DE:CF:DA:F2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9186B80/B869805E123B11EC8A135F42C4F9AE02/qPwlmhAeq4Ju6MvqKgvaXN7P2vI.mft
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
Signature Algorithm: sha256WithRSAEncryption
20:14:dd:50:c7:80:95:8d:01:48:a8:ae:bd:0c:5f:29:a5:54:
4b:d5:3e:58:ae:f6:88:39:df:96:6f:cc:d4:d8:4f:db:08:b2:
c9:b3:60:5e:35:10:60:c5:25:00:80:f6:3a:fc:34:ab:7b:a8:
4a:2c:7a:e3:1d:18:02:af:5e:79:71:ea:34:af:95:f6:3c:b1:
01:ee:13:65:32:89:73:d4:7d:1d:8d:bc:ce:b5:93:92:cf:eb:
04:60:99:f0:5e:ac:0f:0c:6e:8e:a5:41:e6:59:5f:b3:36:36:
16:30:b8:be:12:57:a4:2c:57:e3:c2:14:e3:e1:32:d1:82:2a:
76:f6:ba:c5:e2:f2:12:f1:28:e2:f8:3e:79:41:a6:42:0e:6e:
88:75:70:6d:f8:d4:95:c4:3f:16:fa:2a:a3:37:d4:9c:e5:b3:
6d:2c:17:c3:ed:c6:cc:29:b8:49:3e:a4:7a:b8:78:5b:07:d6:
4e:79:7a:81:32:25:60:12:65:dd:02:c4:ed:a5:f1:94:1a:1b:
13:d4:f9:5e:7a:ac:79:6a:eb:a5:ad:b2:13:98:6b:23:11:be:
73:56:dc:ef:cf:fc:ba:71:79:99:88:32:d3:38:7f:d4:cf:0b:
ed:29:5a:bb:b9:d3:6f:50:a0:1c:d0:d9:99:31:d4:e3:17:cb:
ba:b9:bf:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:02:04 2026 by rpki-client